Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/65A7D4A0974A11EF961C4937C4F9AE02.roa
File:                     65A7D4A0974A11EF961C4937C4F9AE02.roa (raw, json)
Hash identifier:          bkINdpcrvpdCTVdYQexCjzhf30/7t8rUsEVGjSjglbI=
Subject key identifier:   42:38:83:60:A5:20:F7:6B:E0:AB:04:7E:A6:22:8F:9C:D9:C0:2C:A1
Certificate issuer:       /CN=A9147609/serialNumber=02E28F9D460511137B21478823A7B48339565212
Certificate serial:       A4
Authority key identifier: 02:E2:8F:9D:46:05:11:13:7B:21:47:88:23:A7:B4:83:39:56:52:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuKPnUYFERN7IUeII6e0gzlWUhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/65A7D4A0974A11EF961C4937C4F9AE02.roa
Signing time:             Thu 22 May 2025 17:27:59 +0000
ROA not before:           Thu 22 May 2025 17:27:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     150334
IP address blocks:        2405:4440:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.crl
                          rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuKPnUYFERN7IUeII6e0gzlWUhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 16:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147609, serialNumber=02E28F9D460511137B21478823A7B48339565212
        Validity
            Not Before: May 22 17:27:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=682f5e9e-d9dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8e:ee:26:04:a3:07:37:d1:c6:29:6b:5e:a6:
                    d3:1d:18:28:da:7a:f2:30:b5:67:23:0c:44:c2:3d:
                    b8:1d:02:d2:f8:e4:4c:8d:5e:b3:62:63:98:df:f1:
                    f4:1d:f0:6b:44:a7:40:e8:c0:ce:63:62:c1:28:c6:
                    f9:f7:71:39:92:1c:cd:4c:63:7f:23:9e:ff:2b:b9:
                    92:cd:a6:66:85:5f:65:14:90:6f:60:2e:0f:89:52:
                    33:63:22:b7:d7:71:20:7a:3f:6c:4c:c6:30:0a:06:
                    f1:9c:9a:0e:10:00:74:a5:bb:67:80:a7:6a:0d:f2:
                    55:33:06:e9:3b:ea:78:18:97:fa:83:ef:62:74:9f:
                    e0:48:52:b9:c8:cf:78:84:5b:a1:70:a8:6b:8d:c4:
                    1a:d9:f7:6a:b4:f5:ba:aa:26:7b:d9:ea:5b:a4:f6:
                    21:8e:42:33:44:1a:d2:03:87:9c:08:05:a7:cb:b7:
                    df:35:90:d9:30:bd:78:cc:e5:c0:36:b4:79:74:2b:
                    3b:35:c4:3f:6c:6a:ab:fa:45:db:7f:c5:b3:fc:aa:
                    30:88:b5:6f:78:9c:06:72:39:ae:73:c4:fe:46:92:
                    30:35:8c:56:54:f4:96:75:65:47:81:a7:69:01:7a:
                    4c:93:53:3b:05:14:42:5f:b1:73:da:2d:b8:a1:ab:
                    e7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:38:83:60:A5:20:F7:6B:E0:AB:04:7E:A6:22:8F:9C:D9:C0:2C:A1
            X509v3 Authority Key Identifier:
                keyid:02:E2:8F:9D:46:05:11:13:7B:21:47:88:23:A7:B4:83:39:56:52:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuKPnUYFERN7IUeII6e0gzlWUhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/65A7D4A0974A11EF961C4937C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:4440:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         92:dd:b4:77:bb:79:00:7e:c8:9f:60:a0:58:67:96:2a:23:53:
         4c:51:c4:e5:c4:eb:04:f4:ba:e4:17:b6:fb:f3:57:0b:ec:07:
         da:63:05:1e:cb:26:17:3b:a5:50:74:ac:cf:b9:21:ce:1c:9c:
         f5:98:c5:a5:69:bf:72:63:dd:d7:91:de:4f:96:fa:b9:e6:3a:
         34:04:22:55:12:e6:b7:02:6f:3d:37:6d:1d:77:dd:b8:99:ed:
         b4:69:01:e9:15:57:7b:33:f7:05:f4:78:6d:09:39:da:23:86:
         98:21:e4:98:fc:08:18:03:48:09:8b:4c:50:6a:e4:76:7d:86:
         32:4f:fd:cc:21:f1:f1:a7:00:26:64:e1:3b:5b:f8:da:3e:52:
         4e:3d:99:a4:62:0f:09:c4:77:72:10:4a:73:0a:fc:c2:07:8f:
         de:7f:c6:63:9f:9f:19:57:a1:2c:82:b1:6d:d1:7c:ea:a1:98:
         7a:14:bc:77:8d:08:e6:a4:a0:7f:87:39:38:b4:3d:87:82:c2:
         46:42:20:3c:ed:f5:85:37:39:05:cc:3f:de:a2:8d:f1:65:93:
         8e:3c:e5:5f:b2:a1:c5:57:81:8a:65:4b:3c:34:2e:4c:cd:99:
         a2:7e:35:ba:96:bf:50:4c:f0:ac:a2:2b:83:77:e7:35:47:fb:
         44:a8:e4:de
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc2MDkxMTAvBgNVBAUTKDAyRTI4RjlENDYwNTExMTM3QjIxNDc4ODIzQTdCNDgz
Mzk1NjUyMTIwHhcNMjUwNTIyMTcyNzU5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODJmNWU5ZS1kOWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Y7uJgSjBzfRxilrXqbTHRgo2nryMLVnIwxEwj24HQLS+ORMjV6zYmOY3/H0
HfBrRKdA6MDOY2LBKMb593E5khzNTGN/I57/K7mSzaZmhV9lFJBvYC4PiVIzYyK3
13Egej9sTMYwCgbxnJoOEAB0pbtngKdqDfJVMwbpO+p4GJf6g+9idJ/gSFK5yM94
hFuhcKhrjcQa2fdqtPW6qiZ72epbpPYhjkIzRBrSA4ecCAWny7ffNZDZML14zOXA
NrR5dCs7NcQ/bGqr+kXbf8Wz/KowiLVveJwGcjmuc8T+RpIwNYxWVPSWdWVHgadp
AXpMk1M7BRRCX7Fz2i24oavnPQIDAQABo4IClzCCApMwHQYDVR0OBBYEFEI4g2Cl
IPdr4KsEfqYij5zZwCyhMB8GA1UdIwQYMBaAFALij51GBRETeyFHiCOntIM5VlIS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzYwOS82MzJDMzBBRTQ0
MEUxMUU4OTAzRDNBNUJDNEY5QUUwMi9BdUtQblVZRkVSTjdJVWVJSTZlMGd6bFdV
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0F1S1BuVVlGRVJON0lVZUlJNmUwZ3psV1VoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDc2MDkvNjMyQzMwQUU0NDBFMTFFODkwM0QzQTVCQzRGOUFFMDIvNjVBN0Q0QTA5
NzRBMTFFRjk2MUM0OTM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgQkBURAsDANBgkqhkiG9w0BAQsFAAOCAQEAkt20d7t5AH7I
n2CgWGeWKiNTTFHE5cTrBPS65Be2+/NXC+wH2mMFHssmFzulUHSsz7khzhyc9ZjF
pWm/cmPd15HeT5b6ueY6NAQiVRLmtwJvPTdtHXfduJnttGkB6RVXezP3BfR4bQk5
2iOGmCHkmPwIGANICYtMUGrkdn2GMk/9zCHx8acAJmThO1v42j5STj2ZpGIPCcR3
chBKcwr8wgeP3n/GY5+fGVehLIKxbdF86qGYehS8d40I5qSgf4c5OLQ9h4LCRkIg
PO31hTc5Bcw/3qKN8WWTjjzlX7KhxVeBimVLPDQuTM2Zon41upa/UEzwrKIrg3fn
NUf7RKjk3g==
-----END CERTIFICATE-----
Generated at Mon Jun 2 07:21:30 2025 by rpki-client